From 878d0a30ca17607d93cc25cb582076ca717ba0cd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?S=C3=A9bastien=20Larinier?= <sebastien.larinier@sekoia.fr>
Date: Mon, 13 Mar 2017 15:55:29 +0100
Subject: [PATCH] add characteristics and ssdeep to pe-sections

---
 objects/pe-section/definition.json | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/objects/pe-section/definition.json b/objects/pe-section/definition.json
index 2bd1ec6..fa4d9d8 100644
--- a/objects/pe-section/definition.json
+++ b/objects/pe-section/definition.json
@@ -16,6 +16,15 @@
       ],
       "disable_correlation": true
     },
+    "characteristics":{
+      "misp-attributes": "text",
+      "sane_default":[
+        "read",
+        "write",
+        "executable"
+      ]
+    }
+    ,
     "text": {
       "misp-attribute": "text",
       "misp-usage-frequency": 1,
@@ -46,6 +55,10 @@
     "sha512": {
       "misp-attribute": "sha512",
       "misp-usage-frequency": 0
+    },
+    "ssdeep": {
+      "misp-attribute": "ssdeep",
+      "misp-usage-frequency": 0
     }
   },
   "requiredOneOf": [